InfoSec Engineer

About Simplismart

Simplismart is a GenAI inference platform to deploy, scale, and monitor any GenAI model (LLMs,
speech, vision, or diffusion) across cloud or on-prem. Built for strict SLAs, enterprise-grade
security, and full observability. Its modular design lets you optimize for cost or latency or auto-
select the best topology per workload.

What is expected from you-

• Own ISO 27001 and SOC 2 Type II readiness, including controls, evidence, audits, and
auditor coordination.
• Handle enterprise security questionnaires such as CAIQ and VSAQ and participate in
customer security reviews.
• Develop and maintain security policies covering access, encryption, logging, incident
response, BCP/DR, vendor risk, SDLC, and AI governance.
• Design and review zero-trust identity and privileged-access workflows.
• Build security monitoring, SIEM pipelines, incident-response processes, and tabletop
exercises.
• Own vulnerability management, image scanning, SBOMs, CVE triage, and software supply-
chain security.
• Drive data protection across classification, encryption, key management, retention, and
deletion.
• Assess cloud, colo, and infrastructure vendors and maintain the vendor risk program.
• Translate applicable security and privacy regulations into practical technical controls.
What we’re looking for-
• 5+ years in information security, security engineering, or GRC with strong engineering
experience.
• Hands-on experience securing multi-tenant Kubernetes environments.
• Strong knowledge of RBAC, admission control, network policies, secrets management, and
CIS benchmarks.
• Architecture-level experience with at least two of AWS, GCP, or Azure, plus bare-
metal/colo environments.
• Experience taking an organization through ISO 27001 certification or SOC 2 Type II as a
primary contributor.
• Experience responding to and defending enterprise security questionnaires.
• Strong technical and security documentation skills.
• Working knowledge of ISO 27001, SOC 2, GDPR, DPDP Act, and relevant security
frameworks.

Good to have-

• Experience securing AI/ML infrastructure, including model/weight protection, inference-
time data handling, and GPU tenant isolation.
• Experience implementing compliance automation platforms such as Vanta, Sprinto, or
Drata.
• Certifications such as CISSP, CCSP, CISA, ISO 27001 Lead Auditor/Implementer, or CKS.
• Experience with STRIDE/PASTA threat modelling and secure design reviews.
• Familiarity with high-performance networking and its security implications.

Why Join Simplismart?

• Opportunity to define and lead the brand identity of a fast-growing GenAI company.
• Work closely with leadership on high-impact initiatives from global event campaigns to
overall storytelling.
• Be part of a team that values design as a strategic lever, not just execution.
• Competitive compensation and growth opportunities in a high-energy startup
environment